www.dailyfresh-media.com

Issued by Let's Encrypt Authority X3

About this certificate

This digital certificate with serial number 03:a2:f6:99:e5:d2:9f:98:10:0a:be:46:28:ba:28:4b:bb:ab was issued on by Let's Encrypt.

With 4 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

Certificate Subject

CN=www.dailyfresh-media.com

Let's Encrypt

Organization: Let's Encrypt
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 03:a2:f6:99:e5:d2:9f:98:10:0a:be:46:28:ba:28:4b:bb:ab
Serial Number (int): 316790390406214321467570141739985341758379
Serial Number lenght: 138 bits, 18 octets

SubjectKeyId: bb:c4:48:69:5c:29:58:eb:90:c2:8a:77:39:f3:85:55:2a:9f:f9:8c
AuthorityKeyId: a8:4a:6a:63:04:7d:dd:ba:e6:d1:39:b7:a6:45:65:ef:f3:a8:ec:a1

Fingerprint (sha1): 9a:b9:4f:05:89:2f:d3:31:6d:03:fe:e6:57:e7:37:49:9d:e7:17:b8
Fingerprint (sha256): 98:41:9d:cc:d3:db:ab:8d:c4:21:88:e0:f5:6c:5a:21:3d:26:e3:78:94:84:59:84:f5:84:de:5f:7d:0d:2a:cd

Issuing Certificate URL: http://cert.int-x3.letsencrypt.org/

Revocation information

OCSP Server: http://ocsp.int-x3.letsencrypt.org/

Check the revocation status for certificate www.dailyfresh-media.com

4

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for www.dailyfresh-media.com

Public Key Algorithm

RSA

Key Size

4096

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

8 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

admysports.com
dailyfresh-media.com
www.admysports.com
www.dailyfresh-media.com

Other certificates including the domain name dailyfresh-media.com

(limited to 100 certificates)

Certificate

The complete raw certificate details for www.dailyfresh-media.com in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----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-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 316790390406214321467570141739985341758379
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt Authority X3'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2017-03-08 23:44:00 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2017-06-06 23:44:00 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'www.dailyfresh-media.com'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (4208 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 966225984030282688824586418692282239612337344164788972748493585766123719729275153028211609981063034915825136501908294274225548559581940408289625943949592303276269689978275429702031092740597276818519385771818437624241462861536503712110558490560536707509862769291058426303557767150434547886348941579528169796436755349821712505396049609394886128686529033481334825375584216420261350575861349346764494980932207635449372962170715259831113004990675430754356681134267606875483248522799783291920095197850739485525880835153134246659076433914314123242213589363468985378726669675469941081689799167873020633642231258575419575376437619794206734376430638829694359841551454569566332792141954833629740478112276418832921842786024453720537036412168635637083333221500901936141083610549651624742013396130729810531062513667806087534533813153618025055889242291741699372055673828723301964853004272195447619612950991666874404843062928701928606760581293205352414063131128496267219825883633521649520875635806091502375823986779149141946255277437512123929360413068851502032495087250404641373358052019701018981384596438373160102725835739798148358217020721409152362685239123116905622729143850835428309735688874305271359939986443278417149377026720468367895930800783
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							bbc448695c2958eb90c28a7739f385552a9ff98c
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName a84a6a63047dddbae6d139b7a64565eff3a8eca1
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (100 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.int-x3.letsencrypt.org/'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://cert.int-x3.letsencrypt.org/'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (86 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'admysports.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'dailyfresh-media.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.admysports.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.dailyfresh-media.com'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (246 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.44947.1.1.1
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'http://cps.letsencrypt.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.2 (unotice)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'This Certificate may only be relied upon by Relying Parties and only in accordance with the Certificate Policy found at https://letsencrypt.org/repository/'
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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